@vibesdotdev/platform 0.0.0-stage → 1.0.0-rc.2

package/dist/fleets/daemon/fleet-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet-daemon.js","sourceRoot":"","sources":["../../../src/fleets/daemon/fleet-daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAE7F;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAA0C,MAAM,qBAAqB,CAAC;AAGrH,OAAO,EACN,cAAc,EACd,aAAa,EAGb,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACN,qBAAqB,EAKrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACN,YAAY,EAGZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AA8NpF,yFAAyF;AACzF,MAAM,CAAC,MAAM,8BAA8B,GAAG,cAAc,CAAC;AAE7D,kCAAkC;AAClC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IACnD,WAAW;IACX,KAAK;IACL,iBAAiB;IACjB,WAAW;CACX,CAAC,CAAC;AAEH,wEAAwE;AACxE,SAAS,cAAc,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnF,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,uDAAuD;IACvD,OAAO,kCAAkC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC5D,CAAC;AAED,2EAA2E;AAC3E,SAAS,mBAAmB,CAAC,SAA+C;IAC3E,MAAM,cAAc,GAAG,0BAA0B,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,cAAc,CAAC,OAAO;QAAE,OAAO,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;IAC7D,OAAO,GAAG,EAAE,CAAC,0BAA0B,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAMxC;IACA,MAAM,UAAU,GAAyB;QACxC,EAAE,EAAE,OAAO,CAAC,MAAM;QAClB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,gBAAgB,OAAO,CAAC,MAAM,EAAE;QACtD,WAAW,EAAE,4CAA4C,iBAAiB,aAAa;QACvF,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;QACrD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;KAChC,CAAC;IACF,OAAO,UAAU,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAM7C;IACA,MAAM,UAAU,GAAyB;QACxC,EAAE,EAAE,OAAO,CAAC,MAAM;QAClB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,gBAAgB,OAAO,CAAC,MAAM,UAAU;QAC9D,WAAW,EAAE,4CAA4C,iBAAiB,oBAAoB;QAC9F,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;QAC1F,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;KAChC,CAAC;IACF,OAAO,UAAU,CAAC;AACnB,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACxE,yEAAyE;IACzE,gFAAgF;IAChF,4EAA4E;IAC5E,MAAM,IAAI,GAAG,qBAAqB,CACjC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EACpD,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,EACtC,OAAO,CAAC,OAAO,EACf;QACC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,WAAW,EAAE,OAAO,CAAC,WAAW;KAChC,CACD,CAAC;IACF,OAAO;QACN,IAAI;QACJ,6EAA6E;QAC7E,iEAAiE;QACjE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,qBAAqB,EAAE;QACzD,cAAc,EAAE,uBAAuB;QACvC,WAAW,EAAE,oBAAoB;QACjC,4EAA4E;QAC5E,MAAM,EAAE,GAAG,EAAE,CAAC,iBAAiB;QAC/B,wFAAwF;QACxF,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;QACpC,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;KACvG,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAA2B,EAC3B,UAA4G;IAE5G,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,iBAAiB,CAAC;IACnD,MAAM,mBAAmB,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9F,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAEjE,8EAA8E;IAC9E,+EAA+E;IAC/E,iFAAiF;IACjF,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,eAAe,CACxB,sDAAsD,QAAQ,qCAAqC;gBACnG,8FAA8F;gBAC9F,qEAAqE;gBACrE,4DAA4D,EAC5D,mBAAmB,EACnB,EAAE,MAAM,EAAE,2BAA2B,EAAE,SAAS,EAAE,KAAK,EAAE,CACzD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CACxB,sDAAsD,QAAQ,8BAA8B;gBAC5F,6FAA6F;gBAC7F,wFAAwF,EACxF,mBAAmB,EACnB,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CACtD,CAAC;QACH,CAAC;IACF,CAAC;IAED,kFAAkF;IAClF,gFAAgF;IAChF,mFAAmF;IACnF,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CACxB,kFAAkF;YAClF,8EAA8E;YAC9E,8DAA8D;YAC9D,0EAA0E,EAC1E,mBAAmB,EACnB,EAAE,MAAM,EAAE,4BAA4B,EAAE,SAAS,EAAE,KAAK,EAAE,CAC1D,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,gFAAgF;IAChF,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhF,0EAA0E;IAC1E,gFAAgF;IAChF,2EAA2E;IAC3E,wBAAwB;IACxB,IAAI,aAAwC,CAAC;IAC7C,IAAI,mBAAmB,EAAE,CAAC;QACzB,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,gBAAiB;YAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,qFAAqF;IACrF,uFAAuF;IACvF,oFAAoF;IACpF,iDAAiD;IACjD,IAAI,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC;IACvC,MAAM,aAAa,GAAG,CAAC,kBAAkB,IAAI,kBAAkB,CAAC,UAAU,CAAC;IAE3E,8EAA8E;IAC9E,+EAA+E;IAC/E,yDAAyD;IACzD,MAAM,oBAAoB,GAAG,CAAC,EAAqB,EAAmB,EAAE,CACvE,YAAY,CAAC;QACZ,MAAM,EAAE,SAAS,CAAC,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC;QACxD,YAAY,EAAE,EAAE,CAAC,YAAY;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;QACpC,wEAAwE;QACxE,uEAAuE;QACvE,iEAAiE;QACjE,YAAY,EAAE,EAAE,CAAC,YAAY,IAAI,4BAA4B,EAAE;QAC/D,aAAa,EAAE,EAAE,CAAC,aAAa;QAC/B,WAAW,EAAE,GAAG,EAAE;YACjB,SAAS,CAAC,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,MAAM,iBAAiB,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;QACjI,CAAC;QACD,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE;YAC1B,SAAS,CAAC,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,MAAM,kBAAkB,MAAM,EAAE,CAAC,CAAC;QACzH,CAAC;QACD,cAAc,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YACpC,SAAS,CAAC,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CACpD,wBAAwB,OAAO,CAAC,MAAM,0BAA0B,OAAO,WAAW,OAAO,KAAK,CAC9F,CAAC;QACH,CAAC;KACD,CAAC,CAAC;IAEJ,MAAM,QAAQ,GAAiB,aAAa;QAC3C,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,EAAE,QAAQ,CAAC;QAC7E,CAAC,CAAC,CAAC,GAAG,EAAE;YACP,wEAAwE;YACxE,0EAA0E;YAC1E,0EAA0E;YAC1E,2EAA2E;YAC3E,MAAM,CAAC,GAAG,IAAI,cAAc,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;YAC5C,OAAO;gBACN,MAAM,EAAE,oBAAoB;gBAC5B,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,CAAC;gBACV,yEAAyE;gBACzE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAG,CAAC;aACE,CAAC;QAC1B,CAAC,CAAC,EAAE,CAAC;IAEN,+EAA+E;IAC/E,mFAAmF;IACnF,IAAI,SAAsC,CAAC;IAC3C,IAAI,kBAAkB,EAAE,CAAC;QACxB,SAAS,GAAG,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,eAAe,GAAG,GAAyB,EAAE;QAClD,8EAA8E;QAC9E,mFAAmF;QACnF,gFAAgF;QAChF,IAAI,SAAS,IAAI,kBAAkB,IAAI,SAAS,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACxE,OAAO,6BAA6B,CAAC;gBACpC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,YAAY,EAAE,kBAAkB,CAAC,YAAY;gBAC7C,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI,EAAE,OAAO,CAAC,IAAI;aAClB,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,wBAAwB,CAAC;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;SAClB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,eAAe;YAClB,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,UAAU,CAAC,KAAwB;YAClC,2EAA2E;YAC3E,+DAA+D;YAC/D,IAAI,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACjE,4EAA4E;YAC5E,4EAA4E;YAC5E,6DAA6D;YAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM,IAAI,eAAe,CACxB,8EAA8E;oBAC9E,oEAAoE;oBACpE,iFAAiF,EACjF,mBAAmB,EACnB,EAAE,MAAM,EAAE,4BAA4B,EAAE,SAAS,EAAE,KAAK,EAAE,CAC1D,CAAC;YACH,CAAC;YACD,kBAAkB,GAAG,KAAK,CAAC;YAC3B,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,aAAa,EAAE,eAAe;QAC9B,YAAY,CAAC,QAAkC;YAC9C,MAAM,KAAK,GAA0B;gBACpC,GAAG,EAAE,eAAe,EAAE;gBACtB,2EAA2E;gBAC3E,0EAA0E;gBAC1E,sEAAsE;gBACtE,MAAM,EAAE,aAAa;gBACrB,eAAe,EAAE,8BAA8B;gBAC/C,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC;YACF,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC;QACd,CAAC;QACD,KAAK,CAAC,IAAI;YACT,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,SAAS,EAAE,IAAI,EAAE,CAAC;YAClB,MAAM,SAAS,EAAE,OAAO,CAAC;YACzB,+FAA+F;YAC/F,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/fleets/daemon/host-agent/agent.d.ts

@@ -0,0 +1,143 @@
+import { type CapabilityErrorOptions } from '@vibesdotdev/kernel';
+import type { FleetHostLifecycleClient } from '../../host-lifecycle-client.ts';
+/**
+ * Fleet host agent — enrollment, heartbeat, and action-loop lifecycle engine
+ * (L6c, platform.md §Migration 2 — relocated from platform-cli/src/host-agent/).
+ *
+ * **Fleet owns host lifecycle; platform owns host records.** The agent is the
+ * lifecycle engine that:
+ *   1. Enrolls the daemon (one-time daemon commit — fleet emits `host.registered`).
+ *   2. Heartbeats on an interval (liveness — fleet emits `host.health-changed`).
+ *   3. Snapshots and reports capabilities (fleet emits `host.capabilities-discovered`).
+ *   4. Runs the action claim/lease/execute loop (platform reads run status via records).
+ *
+ * After the boundary cut, the agent emits `FleetHostEvent`s via the injected
+ * `FleetHostEventEmitter` rather than calling `platform.hosts.enroll/heartbeat/
+ * claimAction/updateAction` directly. Platform subscribes to the emitter and
+ * projects the events into the host row it owns (platform.md acceptance #6).
+ *
+ * For the pre-Phase-4 transport (before a real fleet event bus exists),
+ * `apps/platform-web`'s host lifecycle routes continue to receive the HTTP POSTs;
+ * the platform-web route handlers emit events into the emitter they registered.
+ * The agent itself no longer knows or cares about the platform HTTP API — it
+ * drives lifecycle through the emitter port.
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { HostEnvironment } from '@vibesdotdev/platform/hosts/schemas/types';
+import type { HostAgentConfig } from '@vibesdotdev/platform/hosts/schemas/agent';
+import type { FleetHostEventEmitter } from '@vibesdotdev/platform/fleets';
+export interface RunningHostAgent {
+    hostToken: string;
+    environment?: HostEnvironment;
+    /** Resolves on an intentional stop and rejects when heartbeat recovery is exhausted. */
+    done: Promise<void>;
+    stop: () => Promise<void>;
+    sendHeartbeat: () => Promise<void>;
+    pollActions: () => Promise<void>;
+}
+/**
+ * Heartbeat retry tuning (G8 — daemon resilience). Failed heartbeats retry with
+ * jittered exponential backoff; after `maxConsecutiveFailures` the agent is
+ * unrecoverable and rejects the running agent's `done` promise so the owning
+ * executable/supervisor can choose its restart policy.
+ */
+export interface HostAgentHeartbeatRetryOptions {
+    /** First retry delay in ms (default 1000). Doubles per consecutive failure. */
+    baseDelayMs?: number;
+    /** Backoff ceiling in ms (default 60 000). */
+    maxDelayMs?: number;
+    /** Consecutive failures before the agent gives up (default 10). */
+    maxConsecutiveFailures?: number;
+}
+/** Enrollment outcome handed to `HostAgentDeps.onEnrolled` (G9 seam). */
+export interface HostAgentEnrollmentInfo {
+    hostId: string;
+    /** The freshly issued DURABLE host token (persist it; relay connects with it). */
+    hostToken: string;
+    environment?: HostEnvironment;
+    /**
+     * The host's globally routable IPv4, when one exists. A host with a public
+     * address can be reached DIRECTLY (http transport); relay is only needed for
+     * NAT'd hosts — the consumer uses this to prefer direct over relay.
+     */
+    publicIp?: string;
+}
+/** EX_CONFIG: the daemon's exit when its credential is refused; service units do not restart on it. */
+export declare const FLEET_DAEMON_CREDENTIAL_REFUSED_EXIT = 78;
+/** Why the agent stops when the platform refuses this host's credential. */
+export declare const HOST_CREDENTIAL_REFUSED_REASON = "The platform refused this host credential; re-enroll the host";
+/**
+ * A refused host credential is not transient: retrying it only repeats the
+ * refusal, so the agent stops on the first one instead of backing off.
+ */
+export declare function isHostCredentialRefusal(error: CapabilityErrorOptions['cause']): boolean;
+/**
+ * Delay before the next claim attempt after `idleStreak` consecutive empty
+ * polls: `base * 2^(n-1)` capped at `maxMs`, never shorter than the configured
+ * interval. Unjittered — an empty claim is idempotent and cheap, so spreading
+ * hosts out buys nothing here.
+ */
+export declare function idleActionPollDelayMs(baseMs: number, idleStreak: number, maxMs?: number): number;
+/**
+ * Jittered exponential backoff for heartbeat retries: `base * 2^(n-1)` capped at
+ * `maxDelayMs`, ±25% jitter (mirrors the relay dial-out backoff in
+ * `relay/connect-relay.ts`).
+ */
+export declare function computeHeartbeatBackoffMs(failureCount: number, baseDelayMs?: number, maxDelayMs?: number): number;
+/**
+ * Dependencies the fleet host agent needs beyond configuration. Injected so
+ * tests can pass stubs and production wires the real emitter + lifecycle client.
+ *
+ * The `lifecycleClient` is the HTTP path that forwards enrollment/heartbeat/
+ * action calls to `apps/platform-web`'s host routes (which emit the corresponding
+ * fleet events server-side). Once a real fleet event transport exists (Phase 4)
+ * this can be replaced with a direct fleet RPC channel.
+ */
+export interface HostAgentDeps {
+    /**
+     * The host's runtime: build actions run on it (its declared OS, captured
+     * environment and bound workspace), never on an ambient one.
+     */
+    runtime: VibesRuntime;
+    /**
+     * The fleet event emitter the agent emits on. Platform-web subscribes to
+     * this and projects lifecycle events into the host record it owns.
+     */
+    emitter: FleetHostEventEmitter;
+    /**
+     * HTTP lifecycle client for the pre-Phase-4 transport: still calls
+     * platform-web's host routes, but the agent only uses it for the network
+     * round-trip; the events are what matter to platform, not the HTTP call.
+     */
+    lifecycleClient: FleetHostLifecycleClient;
+    /**
+     * Called once after a successful enrollment, with the durable host token and
+     * the host's public address (when it has one). The relay-after-enroll seam
+     * (G9): the daemon process starts its relay dial-out from here — on the SAME
+     * run that enrolled — instead of requiring a restart. A throwing hook is
+     * isolated (logged, never fails startup): enrollment already committed
+     * server-side and the one-time enroll token is spent, so the caller MUST get
+     * the durable token back to persist it.
+     */
+    onEnrolled?: (enrollment: HostAgentEnrollmentInfo) => void | Promise<void>;
+    /**
+     * Optional notification when the heartbeat loop exhausts its retries. The
+     * agent also rejects `RunningHostAgent.done`; this callback must not terminate
+     * the embedding process.
+     */
+    onUnrecoverable?: (reason: string, cause?: CapabilityErrorOptions['cause']) => void;
+    /** Heartbeat retry/backoff tuning. Defaults: 1s base, 60s cap, 10 failures. */
+    heartbeatRetry?: HostAgentHeartbeatRetryOptions;
+    /**
+     * Platform origin the host authenticates against (e.g. https://platform.vibes.dev).
+     * When set, a build-job whose payload declares a `cloudflare-r2` publish target
+     * is honored: the executor streams each built artifact to the platform
+     * R2-binding proxy (`PUT {platformOrigin}/api/hosts/actions/{id}/artifacts/{name}`)
+     * using the durable host token — NO S3/R2 credentials on this host. When
+     * undefined a build-job that declares a publish refuses before any step runs
+     * (`build-publish-context-unavailable`); one that declares none still builds.
+     */
+    platformOrigin?: string;
+}
+export declare function startHostAgent(config: HostAgentConfig, deps: HostAgentDeps): Promise<RunningHostAgent>;
+//# sourceMappingURL=agent.d.ts.map

package/dist/fleets/daemon/host-agent/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../../src/fleets/daemon/host-agent/agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAU,KAAK,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAG/E;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAI1E,MAAM,WAAW,gBAAgB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,wFAAwF;IACxF,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAID;;;;;GAKG;AACH,MAAM,WAAW,8BAA8B;IAC9C,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,yEAAyE;AACzE,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAiBD,uGAAuG;AACvG,eAAO,MAAM,oCAAoC,KAAK,CAAC;AAEvD,4EAA4E;AAC5E,eAAO,MAAM,8BAA8B,kEAAkE,CAAC;AAE9G;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,OAAO,CAEvF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAsC,GAC3C,MAAM,CAIR;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACxC,YAAY,EAAE,MAAM,EACpB,WAAW,SAAkC,EAC7C,UAAU,SAAiC,GACzC,MAAM,CAIR;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC7B;;;OAGG;IACH,OAAO,EAAE,YAAY,CAAC;IACtB;;;OAGG;IACH,OAAO,EAAE,qBAAqB,CAAC;IAC/B;;;;OAIG;IACH,eAAe,EAAE,wBAAwB,CAAC;IAC1C;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACpF,+EAA+E;IAC/E,cAAc,CAAC,EAAE,8BAA8B,CAAC;IAChD;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAsB,cAAc,CACnC,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,aAAa,GACjB,OAAO,CAAC,gBAAgB,CAAC,CAwY3B"}

package/dist/fleets/daemon/host-agent/agent.js

@@ -0,0 +1,400 @@
+import { CapabilityError, valueFreeFailure } from '@vibesdotdev/kernel';
+import { settle } from '@vibesdotdev/kernel';
+import { getLogger } from '@vibesdotdev/logging';
+import { hostActionRunSchema } from "../../../schemas/hosts/actions.js";
+import { BuildFailureSchema } from "../../../schemas/build-execution.js";
+import { getCapabilitiesSnapshot, getHeartbeatSnapshot, getPublicIpv4 } from "./system-info.js";
+import { executeBuildJobAction, hasUnconfirmedProcessTermination } from "./build-job-executor.js";
+/**
+ * Ceiling on how long an idle host waits between claim attempts.
+ *
+ * A host with nothing queued polled `/api/hosts/actions/claim` on a fixed
+ * interval forever, so the request rate tracked host count rather than work.
+ * Backing off while every claim comes back empty trades a bounded pickup delay
+ * for that idle cost; the streak resets on the first real action, so a busy host
+ * never leaves its configured interval.
+ */
+const ACTION_POLL_IDLE_MAX_DELAY_MS = 60_000;
+const DEFAULT_HEARTBEAT_BASE_DELAY_MS = 1_000;
+const DEFAULT_HEARTBEAT_MAX_DELAY_MS = 60_000;
+const DEFAULT_HEARTBEAT_MAX_CONSECUTIVE_FAILURES = 10;
+/** EX_CONFIG: the daemon's exit when its credential is refused; service units do not restart on it. */
+export const FLEET_DAEMON_CREDENTIAL_REFUSED_EXIT = 78;
+/** Why the agent stops when the platform refuses this host's credential. */
+export const HOST_CREDENTIAL_REFUSED_REASON = 'The platform refused this host credential; re-enroll the host';
+/**
+ * A refused host credential is not transient: retrying it only repeats the
+ * refusal, so the agent stops on the first one instead of backing off.
+ */
+export function isHostCredentialRefusal(error) {
+    return error instanceof CapabilityError && (error.code === 'AUTH_REQUIRED' || error.code === 'PERMISSION_DENIED');
+}
+/**
+ * Delay before the next claim attempt after `idleStreak` consecutive empty
+ * polls: `base * 2^(n-1)` capped at `maxMs`, never shorter than the configured
+ * interval. Unjittered — an empty claim is idempotent and cheap, so spreading
+ * hosts out buys nothing here.
+ */
+export function idleActionPollDelayMs(baseMs, idleStreak, maxMs = ACTION_POLL_IDLE_MAX_DELAY_MS) {
+    if (idleStreak <= 0)
+        return baseMs;
+    const grown = baseMs * 2 ** (idleStreak - 1);
+    return Math.min(grown, Math.max(baseMs, maxMs));
+}
+/**
+ * Jittered exponential backoff for heartbeat retries: `base * 2^(n-1)` capped at
+ * `maxDelayMs`, ±25% jitter (mirrors the relay dial-out backoff in
+ * `relay/connect-relay.ts`).
+ */
+export function computeHeartbeatBackoffMs(failureCount, baseDelayMs = DEFAULT_HEARTBEAT_BASE_DELAY_MS, maxDelayMs = DEFAULT_HEARTBEAT_MAX_DELAY_MS) {
+    const exponential = Math.min(baseDelayMs * 2 ** Math.max(failureCount - 1, 0), maxDelayMs);
+    const jitter = exponential * 0.25 * (Math.random() * 2 - 1);
+    return Math.max(0, Math.round(exponential + jitter));
+}
+export async function startHostAgent(config, deps) {
+    const { emitter, lifecycleClient } = deps;
+    const logger = getLogger('platform', deps.runtime);
+    const baseDelayMs = deps.heartbeatRetry?.baseDelayMs ?? DEFAULT_HEARTBEAT_BASE_DELAY_MS;
+    const maxDelayMs = deps.heartbeatRetry?.maxDelayMs ?? DEFAULT_HEARTBEAT_MAX_DELAY_MS;
+    const maxConsecutiveFailures = deps.heartbeatRetry?.maxConsecutiveFailures ?? DEFAULT_HEARTBEAT_MAX_CONSECUTIVE_FAILURES;
+    const onUnrecoverable = deps.onUnrecoverable;
+    let resolveDone;
+    let rejectDone;
+    const done = new Promise((resolve, reject) => {
+        resolveDone = resolve;
+        rejectDone = reject;
+    });
+    // The owner may attach after enrollment/token persistence. Keep the rejection
+    // handled internally while preserving it for every external awaiter.
+    void settle(() => done);
+    let hostToken = config.hostToken;
+    let hostEnvironment = config.environment;
+    let stopped = false;
+    let activeAction = null;
+    let idleActionPolls = 0;
+    let nextActionPollAt = 0;
+    let lastHealth = 'unknown';
+    let consecutiveHeartbeatFailures = 0;
+    // Both are the host runtime's lifecycle timers (RC07): its disposal clears them.
+    let stopHeartbeatTimer;
+    let stopActionTimer;
+    const parseFutureLeaseExpiryMs = (leaseExpiresAt, nowMs = Date.now()) => {
+        if (!leaseExpiresAt)
+            return null;
+        const parsed = Date.parse(leaseExpiresAt);
+        if (!Number.isFinite(parsed) || parsed <= nowMs)
+            return null;
+        return parsed;
+    };
+    const scheduleActionLeaseTimer = (actionState, leaseExpiresAtMs) => {
+        actionState.stopLeaseTimer?.();
+        actionState.leaseExpiresAtMs = leaseExpiresAtMs;
+        const remainingMs = Math.max(0, leaseExpiresAtMs - Date.now());
+        actionState.stopLeaseTimer = deps.runtime.lifecycle.timeout(() => {
+            if (activeAction?.id !== actionState.id)
+                return;
+            actionState.controller.abort(new Error(`Host action ${actionState.id} lease expired at ${new Date(leaseExpiresAtMs).toISOString()}`));
+        }, remainingMs);
+    };
+    const capabilities = () => getCapabilitiesSnapshot(deps.runtime, config.capabilityLabels);
+    // Emit a degraded/unreachable health TRANSITION once (reachable stays emitted
+    // per-heartbeat in sendHeartbeat — platform meters billing off that event).
+    const emitHealthTransition = (health) => {
+        if (lastHealth === health)
+            return;
+        emitter.hostHealthChanged({
+            hostId: config.hostId,
+            hostRecordId: config.hostId,
+            health,
+            previous: lastHealth
+        });
+        lastHealth = health;
+    };
+    if (!hostToken && config.enrollToken) {
+        const enroll = await lifecycleClient.enroll({
+            token: config.enrollToken,
+            hostId: config.hostId,
+            environment: config.environment,
+            capabilities: await capabilities(),
+            agentVersion: 'vibes-host-agent'
+        });
+        hostToken = enroll.hostToken;
+        hostEnvironment = enroll.host.environment ?? hostEnvironment;
+        // Fleet owns enrollment — emit `host.registered` so platform can project it.
+        emitter.hostRegistered({
+            hostId: config.hostId,
+            hostRecordId: config.hostId, // FK to platform hostSchema.id
+            origin: 'provisioned',
+            sourceAdapterId: 'fleet/daemon',
+            rpcId: config.hostId
+        });
+        // Relay-after-enroll seam (G9): hand the durable token to the daemon so it
+        // can start the relay (or prefer a direct bind when publicIp is set) on
+        // THIS run. A throwing hook never fails startup — the enroll token is
+        // already spent and the caller must receive the durable token to persist.
+        if (deps.onEnrolled) {
+            {
+                const operation = await settle(async () => {
+                    await deps.onEnrolled?.({
+                        hostId: config.hostId,
+                        hostToken: enroll.hostToken,
+                        environment: hostEnvironment,
+                        publicIp: await getPublicIpv4(deps.runtime)
+                    });
+                });
+                if (!operation.ok) {
+                    const error = operation.cause;
+                    logger.error('Host agent operation failed.', { error: valueFreeFailure(error) });
+                    logger.warn('Host agent enrollment hook failed.', { error: valueFreeFailure(error) });
+                }
+            }
+        }
+    }
+    if (!hostToken) {
+        throw new Error('Host token is required to start agent');
+    }
+    const resolvedHostToken = hostToken;
+    const sendHeartbeat = async () => {
+        if (stopped)
+            return;
+        const runningAction = activeAction;
+        const response = await lifecycleClient.heartbeat(resolvedHostToken, {
+            heartbeat: await getHeartbeatSnapshot(runningAction ? 1 : 0, deps.runtime),
+            capabilities: await capabilities(),
+            actionRunId: runningAction?.id
+        });
+        if (runningAction && activeAction?.id === runningAction.id) {
+            const nowMs = Date.now();
+            const priorLeaseStillLive = !runningAction.controller.signal.aborted && nowMs < runningAction.leaseExpiresAtMs;
+            const renewedExpiryMs = priorLeaseStillLive &&
+                response.action?.id === runningAction.id &&
+                response.action.live
+                ? parseFutureLeaseExpiryMs(response.action.leaseExpiresAt, nowMs)
+                : null;
+            if (renewedExpiryMs === null) {
+                runningAction.stopLeaseTimer?.();
+                runningAction.controller.abort(new Error(!priorLeaseStillLive
+                    ? `Host action ${runningAction.id} lease expired before heartbeat renewal completed`
+                    : `Host action ${runningAction.id} is no longer live (${response.action?.status ?? 'unconfirmed'})`));
+            }
+            else {
+                scheduleActionLeaseTimer(runningAction, renewedExpiryMs);
+            }
+        }
+        hostEnvironment = response.host.environment;
+        // Fleet owns heartbeat liveness — emit `host.health-changed` so platform
+        // can project pending→active and meter billing off this event.
+        emitter.hostHealthChanged({
+            hostId: config.hostId,
+            hostRecordId: config.hostId,
+            health: 'reachable'
+        });
+        // Emit capabilities on each heartbeat cycle so platform stays current.
+        emitter.hostCapabilitiesDiscovered({
+            hostId: config.hostId,
+            hostRecordId: config.hostId,
+            capabilities: (await capabilities())
+        });
+        lastHealth = 'reachable';
+    };
+    const becomeUnrecoverable = (reason, cause) => {
+        if (stopped)
+            return;
+        stopped = true;
+        stopHeartbeatTimer?.();
+        stopActionTimer?.();
+        activeAction?.stopLeaseTimer?.();
+        activeAction?.controller.abort(new Error(reason));
+        emitHealthTransition('unreachable');
+        onUnrecoverable?.(reason, cause);
+        rejectDone(cause instanceof Error
+            ? cause
+            : new Error(reason, cause === undefined ? undefined : { cause }));
+    };
+    const handleHeartbeatFailure = (error) => {
+        if (isHostCredentialRefusal(error)) {
+            becomeUnrecoverable(HOST_CREDENTIAL_REFUSED_REASON, error);
+            return;
+        }
+        consecutiveHeartbeatFailures += 1;
+        if (activeAction && Date.now() >= activeAction.leaseExpiresAtMs) {
+            activeAction.stopLeaseTimer?.();
+            activeAction.controller.abort(new Error(`Host action ${activeAction.id} lease expired while heartbeat failed`));
+        }
+        if (consecutiveHeartbeatFailures >= maxConsecutiveFailures) {
+            becomeUnrecoverable(`Heartbeat failed ${consecutiveHeartbeatFailures} consecutive times`, error);
+            return;
+        }
+        const delayMs = computeHeartbeatBackoffMs(consecutiveHeartbeatFailures, baseDelayMs, maxDelayMs);
+        logger.warn(`[HostAgent] Heartbeat failed (${consecutiveHeartbeatFailures}/${maxConsecutiveFailures}); retrying in ${delayMs}ms`, error);
+        emitHealthTransition('degraded');
+        scheduleHeartbeat(delayMs);
+    };
+    // A refused credential stops the agent; any other poll failure is reported
+    // and the next interval polls again.
+    const handleActionPollFailure = (error) => {
+        if (isHostCredentialRefusal(error)) {
+            becomeUnrecoverable(HOST_CREDENTIAL_REFUSED_REASON, error);
+            return;
+        }
+        logger.warn('Host agent action poll failed.', { error: valueFreeFailure(error) });
+    };
+    const runHeartbeatCycle = async () => {
+        {
+            const operation = await settle(async () => {
+                await sendHeartbeat();
+                consecutiveHeartbeatFailures = 0;
+                scheduleHeartbeat(config.heartbeatIntervalSeconds * 1000);
+            });
+            if (!operation.ok) {
+                const error = operation.cause;
+                logger.error('Host agent operation failed.', { error: valueFreeFailure(error) });
+                handleHeartbeatFailure(error);
+            }
+        }
+    };
+    const scheduleHeartbeat = (delayMs) => {
+        if (stopped)
+            return;
+        stopHeartbeatTimer = deps.runtime.lifecycle.timeout(() => void runHeartbeatCycle(), delayMs);
+    };
+    const pollActions = async () => {
+        if (stopped || activeAction || !config.executeActions)
+            return;
+        // The timer keeps its cadence; the backoff decides whether this tick costs
+        // a request. `once` mode never sets a deadline, so it always claims.
+        if (Date.now() < nextActionPollAt)
+            return;
+        const action = await lifecycleClient.claimAction(resolvedHostToken, { leaseSeconds: 3600 });
+        if (!action) {
+            idleActionPolls += 1;
+            nextActionPollAt =
+                Date.now() +
+                    idleActionPollDelayMs(config.actionPollIntervalSeconds * 1000, idleActionPolls);
+            return;
+        }
+        // Work arrived: drop straight back to the configured interval, because work
+        // usually arrives in runs.
+        idleActionPolls = 0;
+        nextActionPollAt = 0;
+        const initialLeaseExpiryMs = parseFutureLeaseExpiryMs(action.leaseExpiresAt);
+        if (initialLeaseExpiryMs === null) {
+            await settle(() => lifecycleClient.updateAction(action.id, resolvedHostToken, {
+                status: 'failed',
+                error: `Claimed host action ${action.id} is missing a valid future leaseExpiresAt.`
+            }));
+            return;
+        }
+        const controller = new AbortController();
+        const currentAction = {
+            id: action.id,
+            controller,
+            leaseExpiresAtMs: initialLeaseExpiryMs
+        };
+        activeAction = currentAction;
+        scheduleActionLeaseTimer(currentAction, initialLeaseExpiryMs);
+        let logs = '';
+        let retainCustodyOnUnconfirmedKill = false;
+        try {
+            const operation = await settle(async () => {
+                await lifecycleClient.updateAction(action.id, resolvedHostToken, { status: 'running' });
+                if (action.actionKind !== 'infra/build-job') {
+                    throw new Error(`Unsupported host action kind: ${action.actionKind}`);
+                }
+                const result = await executeBuildJobAction(deps.runtime, hostActionRunSchema.parse(action), 
+                // Publish through the platform R2-binding proxy with the durable host
+                // token — the SAME token the lifecycle client authenticates with. Only
+                // when the daemon knows the platform origin; otherwise a declared publish refuses.
+                deps.platformOrigin
+                    ? { platformOrigin: deps.platformOrigin, hostToken: resolvedHostToken }
+                    : undefined, { signal: controller.signal });
+                logs = result.logs;
+                await lifecycleClient.updateAction(action.id, resolvedHostToken, {
+                    status: 'succeeded',
+                    result: result.result,
+                    logs
+                });
+            });
+            if (!operation.ok) {
+                const error = operation.cause;
+                logger.error('Host agent operation failed.', { error: valueFreeFailure(error) });
+                const message = error instanceof Error ? error.message : String(error);
+                const reportFailure = () => lifecycleClient.updateAction(action.id, resolvedHostToken, {
+                    status: 'failed',
+                    error: message,
+                    logs: BuildFailureSchema.safeParse(error).data?.buildLogs ?? logs
+                });
+                if (controller.signal.aborted) {
+                    await settle(reportFailure);
+                }
+                else {
+                    await reportFailure();
+                }
+                if (hasUnconfirmedProcessTermination(error)) {
+                    retainCustodyOnUnconfirmedKill = true;
+                    becomeUnrecoverable(`Host action ${action.id} child process termination could not be confirmed`, error);
+                }
+            }
+        }
+        finally {
+            currentAction.stopLeaseTimer?.();
+            if (!retainCustodyOnUnconfirmedKill) {
+                activeAction = null;
+            }
+        }
+    };
+    if (config.once) {
+        await sendHeartbeat();
+        if (config.executeActions) {
+            await pollActions();
+        }
+    }
+    else {
+        // A failed startup heartbeat is NOT fatal in continuous mode: enrollment
+        // (when it ran) already spent the one-time token, so throwing here would
+        // lose the durable host token before the caller could persist it. Enter
+        // the retry loop instead; exhaustion goes through onUnrecoverable.
+        {
+            const operation = await settle(async () => {
+                await sendHeartbeat();
+                scheduleHeartbeat(config.heartbeatIntervalSeconds * 1000);
+            });
+            if (!operation.ok) {
+                const error = operation.cause;
+                logger.error('Host agent operation failed.', { error: valueFreeFailure(error) });
+                handleHeartbeatFailure(error);
+            }
+        }
+        if (config.executeActions && !stopped) {
+            stopActionTimer = deps.runtime.lifecycle.interval(() => {
+                void settle(() => pollActions()).then((polled) => {
+                    if (!polled.ok)
+                        handleActionPollFailure(polled.cause);
+                });
+            }, config.actionPollIntervalSeconds * 1000);
+        }
+    }
+    return {
+        hostToken: resolvedHostToken,
+        done,
+        get environment() {
+            return hostEnvironment;
+        },
+        sendHeartbeat,
+        pollActions,
+        async stop() {
+            if (stopped)
+                return;
+            stopped = true;
+            stopHeartbeatTimer?.();
+            stopActionTimer?.();
+            activeAction?.stopLeaseTimer?.();
+            activeAction?.controller.abort(new Error('Host agent stopped'));
+            // Goodbye: the agent KNOWS it is going offline — emit the transition so
+            // a subscriber never waits out a heartbeat-staleness window.
+            emitHealthTransition('unreachable');
+            resolveDone();
+        }
+    };
+}
+//# sourceMappingURL=agent.js.map

package/dist/fleets/daemon/host-agent/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../../../src/fleets/daemon/host-agent/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAsB,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,MAAM,EAA+B,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AA4BzE,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AA2ClG;;;;;;;;GAQG;AACH,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAE7C,MAAM,+BAA+B,GAAG,KAAK,CAAC;AAC9C,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAC9C,MAAM,0CAA0C,GAAG,EAAE,CAAC;AAEtD,uGAAuG;AACvG,MAAM,CAAC,MAAM,oCAAoC,GAAG,EAAE,CAAC;AAEvD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,8BAA8B,GAAG,+DAA+D,CAAC;AAE9G;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAsC;IAC7E,OAAO,KAAK,YAAY,eAAe,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;AACnH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACpC,MAAc,EACd,UAAkB,EAClB,QAAgB,6BAA6B;IAE7C,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACxC,YAAoB,EACpB,WAAW,GAAG,+BAA+B,EAC7C,UAAU,GAAG,8BAA8B;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AA0DD,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,MAAuB,EACvB,IAAmB;IAEnB,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,IAAI,+BAA+B,CAAC;IACxF,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,UAAU,IAAI,8BAA8B,CAAC;IACrF,MAAM,sBAAsB,GAC3B,IAAI,CAAC,cAAc,EAAE,sBAAsB,IAAI,0CAA0C,CAAC;IAC3F,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC7C,IAAI,WAAwB,CAAC;IAC7B,IAAI,UAA6D,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,WAAW,GAAG,OAAO,CAAC;QACtB,UAAU,GAAG,MAAM,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,8EAA8E;IAC9E,qEAAqE;IACrE,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACjC,IAAI,eAAe,GAAgC,MAAM,CAAC,WAAW,CAAC;IACtE,IAAI,OAAO,GAAG,KAAK,CAAC;IAOpB,IAAI,YAAY,GAAiC,IAAI,CAAC;IACtD,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,UAAU,GAAoB,SAAS,CAAC;IAC5C,IAAI,4BAA4B,GAAG,CAAC,CAAC;IACrC,iFAAiF;IACjF,IAAI,kBAA4C,CAAC;IACjD,IAAI,eAAyC,CAAC;IAE9C,MAAM,wBAAwB,GAAG,CAChC,cAAyC,EACzC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EACF,EAAE;QAClB,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC;QAC7D,OAAO,MAAM,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,wBAAwB,GAAG,CAChC,WAAkC,EAClC,gBAAwB,EACvB,EAAE;QACH,WAAW,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/B,WAAW,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;YAChE,IAAI,YAAY,EAAE,EAAE,KAAK,WAAW,CAAC,EAAE;gBAAE,OAAO;YAChD,WAAW,CAAC,UAAU,CAAC,KAAK,CAC3B,IAAI,KAAK,CACR,eAAe,WAAW,CAAC,EAAE,qBAAqB,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,EAAE,CAC5F,CACD,CAAC;QACH,CAAC,EAAE,WAAW,CAAC,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAE1F,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,oBAAoB,GAAG,CAAC,MAAkC,EAAE,EAAE;QACnE,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO;QAClC,OAAO,CAAC,iBAAiB,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,MAAM;YACN,QAAQ,EAAE,UAAU;SACpB,CAAC,CAAC;QACH,UAAU,GAAG,MAAM,CAAC;IACrB,CAAC,CAAC;IAEF,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC;YAC3C,KAAK,EAAE,MAAM,CAAC,WAAW;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,YAAY,EAAE;YAClC,YAAY,EAAE,kBAAkB;SAChC,CAAC,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7B,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC;QAC7D,6EAA6E;QAC7E,OAAO,CAAC,cAAc,CAAC;YACtB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,+BAA+B;YAC5D,MAAM,EAAE,aAAa;YACrB,eAAe,EAAE,cAAc;YAC/B,KAAK,EAAE,MAAM,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,0EAA0E;QAC1E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,CAAC;gBACA,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;oBACzC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;wBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,WAAW,EAAE,eAAe;wBAC5B,QAAQ,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;qBAC3C,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;oBACvB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;oBAC9B,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBACjF,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACvF,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,iBAAiB,GAAG,SAAS,CAAC;IAEpC,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAChC,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,aAAa,GAAG,YAAY,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,iBAAiB,EAAE;YACnE,SAAS,EAAE,MAAM,oBAAoB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC;YAC1E,YAAY,EAAE,MAAM,YAAY,EAAE;YAClC,WAAW,EAAE,aAAa,EAAE,EAAE;SAC9B,CAAC,CAAC;QACH,IAAI,aAAa,IAAI,YAAY,EAAE,EAAE,KAAK,aAAa,CAAC,EAAE,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,mBAAmB,GACxB,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,GAAG,aAAa,CAAC,gBAAgB,CAAC;YACpF,MAAM,eAAe,GACpB,mBAAmB;gBACnB,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,aAAa,CAAC,EAAE;gBACxC,QAAQ,CAAC,MAAM,CAAC,IAAI;gBACnB,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;gBACjE,CAAC,CAAC,IAAI,CAAC;YACT,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gBAC9B,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;gBACjC,aAAa,CAAC,UAAU,CAAC,KAAK,CAC7B,IAAI,KAAK,CACR,CAAC,mBAAmB;oBACnB,CAAC,CAAC,eAAe,aAAa,CAAC,EAAE,mDAAmD;oBACpF,CAAC,CAAC,eAAe,aAAa,CAAC,EAAE,uBAAuB,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,aAAa,GAAG,CACpG,CACD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,wBAAwB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YAC1D,CAAC;QACF,CAAC;QACD,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;QAC5C,yEAAyE;QACzE,+DAA+D;QAC/D,OAAO,CAAC,iBAAiB,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,MAAM,EAAE,WAAW;SACnB,CAAC,CAAC;QACH,uEAAuE;QACvE,OAAO,CAAC,0BAA0B,CAAC;YAClC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,YAAY,EAAE,CAAC,MAAM,YAAY,EAAE,CAAC;SACpC,CAAC,CAAC;QACH,UAAU,GAAG,WAAW,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAE,KAAuC,EAAE,EAAE;QACvF,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,kBAAkB,EAAE,EAAE,CAAC;QACvB,eAAe,EAAE,EAAE,CAAC;QACpB,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC;QACjC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACpC,eAAe,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjC,UAAU,CACT,KAAK,YAAY,KAAK;YACrB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CACjE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,sBAAsB,GAAG,CAAC,KAAsC,EAAE,EAAE;QACzE,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,mBAAmB,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO;QACR,CAAC;QACD,4BAA4B,IAAI,CAAC,CAAC;QAClC,IAAI,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,YAAY,CAAC,gBAAgB,EAAE,CAAC;YACjE,YAAY,CAAC,cAAc,EAAE,EAAE,CAAC;YAChC,YAAY,CAAC,UAAU,CAAC,KAAK,CAC5B,IAAI,KAAK,CAAC,eAAe,YAAY,CAAC,EAAE,uCAAuC,CAAC,CAChF,CAAC;QACH,CAAC;QACD,IAAI,4BAA4B,IAAI,sBAAsB,EAAE,CAAC;YAC5D,mBAAmB,CAClB,oBAAoB,4BAA4B,oBAAoB,EACpE,KAAK,CACL,CAAC;YACF,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,yBAAyB,CACxC,4BAA4B,EAC5B,WAAW,EACX,UAAU,CACV,CAAC;QACF,MAAM,CAAC,IAAI,CACV,iCAAiC,4BAA4B,IAAI,sBAAsB,kBAAkB,OAAO,IAAI,EACpH,KAAK,CACL,CAAC;QACF,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACjC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,2EAA2E;IAC3E,qCAAqC;IACrC,MAAM,uBAAuB,GAAG,CAAC,KAAoB,EAAE,EAAE;QACxD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,mBAAmB,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,IAAI,EAAE;QACpC,CAAC;YACA,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;gBACzC,MAAM,aAAa,EAAE,CAAC;gBACtB,4BAA4B,GAAG,CAAC,CAAC;gBACjC,iBAAiB,CAAC,MAAM,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjF,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAE,EAAE;QAC7C,IAAI,OAAO;YAAE,OAAO;QACpB,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9F,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC9B,IAAI,OAAO,IAAI,YAAY,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO;QAC9D,2EAA2E;QAC3E,qEAAqE;QACrE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,eAAe,IAAI,CAAC,CAAC;YACrB,gBAAgB;gBACf,IAAI,CAAC,GAAG,EAAE;oBACV,qBAAqB,CAAC,MAAM,CAAC,yBAAyB,GAAG,IAAI,EAAE,eAAe,CAAC,CAAC;YACjF,OAAO;QACR,CAAC;QACD,4EAA4E;QAC5E,2BAA2B;QAC3B,eAAe,GAAG,CAAC,CAAC;QACpB,gBAAgB,GAAG,CAAC,CAAC;QAErB,MAAM,oBAAoB,GAAG,wBAAwB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7E,IAAI,oBAAoB,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,MAAM,CAAC,GAAG,EAAE,CACjB,eAAe,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE;gBAC1D,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,uBAAuB,MAAM,CAAC,EAAE,4CAA4C;aACnF,CAAC,CACF,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,aAAa,GAA0B;YAC5C,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU;YACV,gBAAgB,EAAE,oBAAoB;SACtC,CAAC;QACF,YAAY,GAAG,aAAa,CAAC;QAC7B,wBAAwB,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;QAC9D,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,8BAA8B,GAAG,KAAK,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;gBACzC,MAAM,eAAe,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACxF,IAAI,MAAM,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;gBACvE,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACzC,IAAI,CAAC,OAAO,EACZ,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC;gBACjC,sEAAsE;gBACtE,uEAAuE;gBACvE,mFAAmF;gBACnF,IAAI,CAAC,cAAc;oBAClB,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE;oBACvE,CAAC,CAAC,SAAS,EACZ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAC7B,CAAC;gBACF,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACnB,MAAM,eAAe,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE;oBAChE,MAAM,EAAE,WAAW;oBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,IAAI;iBACJ,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,aAAa,GAAG,GAAG,EAAE,CAC1B,eAAe,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE;oBAC1D,MAAM,EAAE,QAAQ;oBAChB,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI;iBACjE,CAAC,CAAC;gBACJ,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC/B,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACP,MAAM,aAAa,EAAE,CAAC;gBACvB,CAAC;gBACD,IAAI,gCAAgC,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7C,8BAA8B,GAAG,IAAI,CAAC;oBACtC,mBAAmB,CAClB,eAAe,MAAM,CAAC,EAAE,mDAAmD,EAC3E,KAAK,CACL,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,8BAA8B,EAAE,CAAC;gBACrC,YAAY,GAAG,IAAI,CAAC;YACrB,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,aAAa,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,MAAM,WAAW,EAAE,CAAC;QACrB,CAAC;IACF,CAAC;SAAM,CAAC;QACP,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,mEAAmE;QACnE,CAAC;YACA,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;gBACzC,MAAM,aAAa,EAAE,CAAC;gBACtB,iBAAiB,CAAC,MAAM,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjF,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE;gBACtD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBAChD,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvD,CAAC,CAAC,CAAC;YACJ,CAAC,EAAE,MAAM,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;IAED,OAAO;QACN,SAAS,EAAE,iBAAiB;QAC5B,IAAI;QACJ,IAAI,WAAW;YACd,OAAO,eAAe,CAAC;QACxB,CAAC;QACD,aAAa;QACb,WAAW;QACX,KAAK,CAAC,IAAI;YACT,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,kBAAkB,EAAE,EAAE,CAAC;YACvB,eAAe,EAAE,EAAE,CAAC;YACpB,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC;YACjC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAChE,wEAAwE;YACxE,6DAA6D;YAC7D,oBAAoB,CAAC,aAAa,CAAC,CAAC;YACpC,WAAW,EAAE,CAAC;QACf,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/fleets/daemon/host-agent/build-job-credentials.d.ts

@@ -0,0 +1,25 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { HostActionRun } from '@vibesdotdev/platform/hosts/schemas/types';
+import { type BuildJobCredentials } from '../../build-job-credentials-contract.ts';
+export type { BuildJobCredentials } from '../../build-job-credentials-contract.ts';
+export declare const shellQuote: (value: string) => string;
+/** Reject malformed wire material without including secret-bearing Zod issues in logs. */
+export declare function parseBuildJobCredentials(value: unknown, action: HostActionRun): BuildJobCredentials;
+/**
+ * The key exists only during the single fetch that consumes its one-shot lease.
+ * Its public half is checked on the handed runtime (`ssh-keygen -y`, the host
+ * set alone), so no host agent or key reaches the check.
+ */
+export declare function materializeBuildSshCredential(runtime: VibesRuntime, credentials: BuildJobCredentials, source: {
+    repository?: string;
+    ref?: string;
+    authentication?: {
+        repositoryId?: string;
+    };
+}, workspace: string): Promise<{
+    env: Record<string, string>;
+    cleanup: () => Promise<void>;
+}>;
+/** Re-enter the handed runtime's host (its Bun runtime, including a compiled Vibes executable). */
+export declare function materializeBuildRuntime(runtime: VibesRuntime, workspace: string): Promise<string>;
+//# sourceMappingURL=build-job-credentials.d.ts.map

package/dist/fleets/daemon/host-agent/build-job-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-job-credentials.d.ts","sourceRoot":"","sources":["../../../../src/fleets/daemon/host-agent/build-job-credentials.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE1H,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAE/E,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9G,YAAY,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,eAAO,MAAM,UAAU,GAAI,OAAO,MAAM,WAA0C,CAAC;AAEnF,0FAA0F;AAC1F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,mBAAmB,CAenG;AAED;;;;GAIG;AACH,wBAAsB,6BAA6B,CAClD,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,mBAAmB,EAChC,MAAM,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACzF,SAAS,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAqDxE;AAED,mGAAmG;AACnG,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAajB"}